Description
The filter function in php/src/include.php in Simple Management for BIND (aka smbind) before 0.4.8 does not anchor a certain regular expression, which allows remote attackers to conduct SQL injection attacks and execute arbitrary SQL commands via the username parameter to the admin login page.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 5.0 | smbind | 0.4.7-3+lenny1 | DSA-2103-1 |
Advisories 1
- DSA-2103-1 smbind - sql injection Debian Security (DSA / DLA) · Mar 9, 2026
References
- [oss-security] 20100905 CVE request: smbind Sql Injection mailing-list
- http://sourceforge.net/projects/smbind/files/smbind/0.4.8/smbind-0.4.8.tar.bz2/download
- DSA-2103 vendor-advisory
- http://packetstormsecurity.org/1009-exploits/smbind-sql.txt
- [oss-security] 20100907 Re: CVE request: smbind Sql Injection mailing-list